Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File:                     aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier:          95u2bwA82qTVKxLoqH4WGUkM8ozQfBw5YOkxy9ZGQV8=
Subject key identifier:   B8:7D:DD:CD:5E:59:2E:E9:F6:23:32:C6:E8:FD:D9:FC:D6:F5:FA:3C
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer:       /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number:          08C2
Signing time:             Wed 28 Oct 2026 20:51:43 +0000
Manifest this update:     Wed 28 Oct 2026 20:51:43 +0000
Manifest next update:     Wed 04 Nov 2026 20:51:43 +0000
Files and hashes:         1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: 6TEMEP1V2/r/n0q5WJRctfGawxZ9CVyQ4O00ft/tiK0=)
                          2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
                          3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
                          rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 20:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
        Validity
            Not Before: Oct 28 20:51:43 2026 GMT
            Not After : Nov  4 20:51:43 2026 GMT
        Subject: CN=6ae2605f-4429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:2c:6d:6f:94:01:14:1f:9f:6b:1f:95:6d:
                    08:9b:94:17:3a:83:b9:15:65:be:82:6f:54:a7:fe:
                    34:1d:58:10:93:27:1a:ea:fa:9a:c0:9f:35:8e:cf:
                    d5:b6:8e:ab:aa:7c:4d:33:d2:f5:a5:03:ec:8d:f0:
                    20:79:8d:78:a8:65:69:7d:0f:46:69:5f:01:35:45:
                    0f:06:f7:ae:04:69:86:9d:34:24:c7:f8:01:95:6a:
                    42:7a:4e:66:77:77:bf:13:1f:38:d9:71:df:27:f2:
                    27:59:c0:9f:85:45:21:76:70:42:ef:0d:98:13:86:
                    ac:53:d3:48:91:46:bd:d0:96:54:b6:23:5b:4e:8e:
                    70:e8:81:cd:9f:b8:10:89:c3:2e:0f:56:99:e4:2d:
                    44:f8:d5:3f:2d:be:9c:19:e3:8c:88:62:6a:93:23:
                    e0:24:38:30:c4:b6:25:b4:d3:ac:89:8a:57:f5:ed:
                    56:50:28:34:5c:dd:ec:ff:5f:f7:f4:c4:c2:66:e2:
                    87:6f:8f:4e:f0:30:ac:fe:07:99:bc:40:4a:9e:bd:
                    53:74:f4:fe:52:39:6c:80:aa:5b:0a:ab:b1:74:53:
                    9c:61:1c:ec:e2:cf:a5:6d:dc:c4:63:40:f1:af:a9:
                    af:eb:68:5f:3f:97:4a:7b:eb:bf:42:d7:af:69:01:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:DD:CD:5E:59:2E:E9:F6:23:32:C6:E8:FD:D9:FC:D6:F5:FA:3C
            X509v3 Authority Key Identifier:
                keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:62:7d:1b:c6:5b:bd:0e:11:b6:f9:c9:79:42:7c:47:07:64:
         81:6b:08:49:a5:8a:e8:54:2c:25:ee:17:4a:c6:9a:47:79:9c:
         f1:b3:0a:e0:d2:a7:62:a3:2c:5d:32:1e:f2:b4:24:7f:90:a8:
         14:7b:48:c7:04:04:3a:e4:fa:25:17:86:28:ee:ea:37:c5:7f:
         25:bd:ec:ed:90:de:2c:13:21:13:0d:f9:93:14:bf:02:f8:6e:
         f9:d3:99:db:00:16:6d:8d:a8:2b:01:1e:98:9c:f9:65:25:04:
         9a:ec:ad:56:45:f9:23:36:86:4f:21:02:f0:3d:1a:9d:d5:51:
         ba:e5:ac:17:13:84:68:11:b1:37:bd:14:c0:d3:8b:81:6b:01:
         d7:05:84:bb:7d:8a:28:d2:4f:55:6a:6e:7a:88:73:0e:9e:6f:
         d2:8a:58:12:af:4b:13:31:1b:c3:b9:44:89:e5:ef:c0:f1:6b:
         31:b6:c1:d2:51:6f:55:ae:3f:3a:c8:61:18:b0:7f:cf:fa:a7:
         3d:53:e2:c6:51:be:84:ad:e4:16:d6:34:1f:5a:76:28:5d:ae:
         06:93:bb:f1:81:8b:a4:48:da:40:28:ef:3b:8d:bc:c2:56:cc:
         30:2f:a8:b6:bf:c2:81:07:40:65:08:bb:33:63:8f:21:18:64:
         84:7c:0b:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy
Mzg4RTVFQjEwHhcNMjYxMDI4MjA1MTQzWhcNMjYxMTA0MjA1MTQzWjAYMRYwFAYD
VQQDEw02YWUyNjA1Zi00NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjwsbW+UARQfn2sflW0Im5QXOoO5FWW+gm9Up/40HVgQkyca6vqawJ81js/V
to6rqnxNM9L1pQPsjfAgeY14qGVpfQ9GaV8BNUUPBveuBGmGnTQkx/gBlWpCek5m
d3e/Ex842XHfJ/InWcCfhUUhdnBC7w2YE4asU9NIkUa90JZUtiNbTo5w6IHNn7gQ
icMuD1aZ5C1E+NU/Lb6cGeOMiGJqkyPgJDgwxLYltNOsiYpX9e1WUCg0XN3s/1/3
9MTCZuKHb49O8DCs/geZvEBKnr1TdPT+UjlsgKpbCquxdFOcYRzs4s+lbdzEY0Dx
r6mv62hfP5dKe+u/QtevaQHelQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLh93c1e
WS7p9iMyxuj92fzW9fo8MB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4
NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l
X3FLLTNXZXZzYmdqaU9YckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMWJ9G8ZbvQ4RtvnJeUJ8RwdkgWsISaWK6FQsJe4XSsaaR3mc8bMK4NKnYqMs
XTIe8rQkf5CoFHtIxwQEOuT6JReGKO7qN8V/Jb3s7ZDeLBMhEw35kxS/Avhu+dOZ
2wAWbY2oKwEemJz5ZSUEmuytVkX5IzaGTyEC8D0andVRuuWsFxOEaBGxN70UwNOL
gWsB1wWEu32KKNJPVWpueohzDp5v0opYEq9LEzEbw7lEieXvwPFrMbbB0lFvVa4/
OshhGLB/z/qnPVPixlG+hK3kFtY0H1p2KF2uBpO78YGLpEjaQCjvO428wlbMMC+o
tr/CgQdAZQi7M2OPIRhkhHwLTg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:06:55 2026 by rpki-client